Roave Security Advisories
A Composer package that blocks installation of PHP dependencies with known security vulnerabilities.
What is Roave Security Advisories?
Roave Security Advisories is a Composer package that blocks the installation of PHP dependencies with known security vulnerabilities. It integrates into the Composer workflow to automatically check packages against updated security advisory databases, preventing developers from accidentally introducing vulnerable code into their projects.
PHP developers and teams using Composer for dependency management who want to automate security checks and prevent vulnerable dependencies from being installed.
It provides a simple, automated way to enforce security at the dependency installation stage without runtime overhead, leveraging authoritative sources like FriendsOfPHP/security-advisories and GitHub Advisory Database for comprehensive coverage.
Overview
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
Use Cases
Best For
- Preventing installation of vulnerable PHP packages during development
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
